Skip to content

Support using agent yamls from private github repos#1594

Merged
dgageot merged 1 commit intodocker:mainfrom
dgageot:gh-token
Feb 4, 2026
Merged

Support using agent yamls from private github repos#1594
dgageot merged 1 commit intodocker:mainfrom
dgageot:gh-token

Conversation

@dgageot
Copy link
Member

@dgageot dgageot commented Feb 4, 2026

No description provided.

@dgageot dgageot requested a review from a team as a code owner February 4, 2026 17:38
Copy link
Contributor

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Security Review

⚠️ Found 1 high severity security vulnerability in the GitHub token authentication implementation.

Summary

The new GitHub authentication feature has an insecure URL validation that could leak GitHub tokens to malicious domains. This needs to be fixed before merging.

Signed-off-by: David Gageot <david.gageot@docker.com>
@dgageot dgageot merged commit 3406abc into docker:main Feb 4, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants